Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File:                     9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier:          2UY7NwJNJHz5O6RZsHyuU3FS80mkWYnCup1OJoGAvIg=
Subject key identifier:   B9:4C:91:5B:47:4B:48:6E:7E:D9:2A:DD:87:B6:DC:84:9A:61:5F:B9
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer:       /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial:       01962F06C98EF9B98D23E264C53B9182F087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=)
                          2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: ERdWQwRHOUXlY8hWg3NF7Sxt9qrGSR6anO5GMz2s5Is=)
                          3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c9:8e:f9:b9:8d:23:e2:64:c5:3b:91:82:f0:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=b94c915b474b486e7ed92add87b6dc849a615fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0b:cb:72:95:fb:3e:a0:82:4a:0d:0d:85:ed:
                    99:2a:6c:2a:06:a3:4e:25:fe:19:fb:91:d6:71:60:
                    38:e1:fe:c5:fe:cd:28:ea:a9:4b:5d:5e:a0:e8:bb:
                    a2:4d:6e:bd:27:19:f6:a1:f4:46:f1:30:dd:66:d0:
                    6f:c5:a4:2f:c7:42:1b:3d:c1:2f:a1:fc:a3:bb:ba:
                    29:dd:d3:a5:63:14:8a:e0:e5:f6:c9:70:27:8d:28:
                    35:5d:9b:58:0e:25:5a:1b:89:93:d5:9c:21:1f:40:
                    6e:cd:bd:db:95:f5:6f:4d:cc:75:2f:cd:21:b3:c8:
                    26:d3:b4:c0:f1:6b:d2:cc:7d:12:09:9b:fb:bb:99:
                    3b:70:66:a1:2a:3a:1d:bf:12:e7:f5:35:e7:ce:d3:
                    cd:2e:13:cf:b2:99:df:3c:d8:88:bf:7c:b1:71:d9:
                    08:bd:49:bc:63:08:59:5e:76:1d:7b:b6:54:6c:98:
                    ed:76:ae:c3:49:57:dd:69:0c:e4:85:18:3f:34:f9:
                    43:ee:e9:03:f0:9d:5f:a5:90:18:0e:ec:fe:b0:dc:
                    89:28:0c:01:f2:6d:54:59:80:ad:be:dd:9c:6b:69:
                    e1:12:d7:c1:ce:28:7c:5d:8e:12:aa:63:18:50:d7:
                    ac:b0:38:9b:88:ce:b8:e7:7d:dc:37:e0:df:64:af:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:91:5B:47:4B:48:6E:7E:D9:2A:DD:87:B6:DC:84:9A:61:5F:B9
            X509v3 Authority Key Identifier:
                keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:92:36:d1:f8:8f:fb:47:04:5e:02:15:0e:77:b1:bb:9b:3a:
         c7:91:9c:9c:55:b3:6e:0f:3a:4c:b3:38:11:03:1a:f5:3f:e5:
         51:b8:26:ae:c0:40:86:a1:03:3d:bf:41:06:2b:be:8f:c9:ad:
         b4:48:d2:94:91:29:ff:f6:46:d3:cf:69:df:eb:ea:7e:1c:7d:
         03:73:52:72:b0:a1:58:5b:af:b5:f4:88:96:1b:4a:a7:50:a1:
         db:52:cb:5f:ba:31:23:08:ff:92:60:b9:50:05:66:70:56:21:
         ef:3a:0f:0f:9e:8b:3a:12:ac:21:5a:d4:6f:ff:d3:f1:48:ae:
         09:a2:0e:20:9f:0d:f7:7f:34:6d:1b:8a:86:07:60:9e:e5:99:
         97:c2:41:67:14:22:b0:dc:aa:ba:c2:11:5e:81:12:8a:2e:8c:
         ad:5f:af:c3:24:39:04:cc:e1:b8:d8:6f:ec:09:34:b4:1a:c6:
         41:54:5a:49:1b:11:48:9e:2c:f0:52:91:63:d7:fe:ed:91:77:
         c6:0c:5e:4d:2b:34:0a:ca:64:8f:43:ec:8e:11:ff:f4:15:96:
         f0:7a:fa:06:00:e3:a8:b2:11:47:79:04:d6:6f:3f:fd:fe:ab:
         1f:0b:36:06:db:6c:f1:5f:c2:b7:7b:19:6c:7c:df:e7:cb:c7:
         5a:ee:61:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBsmO+bmNI+JkxTuRgvCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1
M2E1ZTkwHhcNMjUwNDEzMTIwMTM2WhcNMjUwNDE0MTIwMTM2WjAzMTEwLwYDVQQD
EyhiOTRjOTE1YjQ3NGI0ODZlN2VkOTJhZGQ4N2I2ZGM4NDlhNjE1ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwvLcpX7PqCCSg0Nhe2ZKmwqBqNO
Jf4Z+5HWcWA44f7F/s0o6qlLXV6g6LuiTW69Jxn2ofRG8TDdZtBvxaQvx0IbPcEv
ofyju7op3dOlYxSK4OX2yXAnjSg1XZtYDiVaG4mT1ZwhH0Buzb3blfVvTcx1L80h
s8gm07TA8WvSzH0SCZv7u5k7cGahKjodvxLn9TXnztPNLhPPspnfPNiIv3yxcdkI
vUm8YwhZXnYde7ZUbJjtdq7DSVfdaQzkhRg/NPlD7ukD8J1fpZAYDuz+sNyJKAwB
8m1UWYCtvt2ca2nhEtfBzih8XY4SqmMYUNessDibiM64533cN+DfZK8UgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlMkVtHS0huftkq3Ye23ISaYV+5MB8GA1UdIwQY
MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt
MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz
LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJI20fiP
+0cEXgIVDnexu5s6x5GcnFWzbg86TLM4EQMa9T/lUbgmrsBAhqEDPb9BBiu+j8mt
tEjSlJEp//ZG089p3+vqfhx9A3NScrChWFuvtfSIlhtKp1Ch21LLX7oxIwj/kmC5
UAVmcFYh7zoPD56LOhKsIVrUb//T8UiuCaIOIJ8N9380bRuKhgdgnuWZl8JBZxQi
sNyqusIRXoESii6MrV+vwyQ5BMzhuNhv7Ak0tBrGQVRaSRsRSJ4s8FKRY9f+7ZF3
xgxeTSs0Cspkj0PsjhH/9BWW8Hr6BgDjqLIRR3kE1m8//f6rHws2Btts8V/Ct3sZ
bHzf58vHWu5hSg==
-----END CERTIFICATE-----